Privacy Policy
Information on how we collect, use, and protect your data.
Privacy Policy
LunAvalos Digital House, S.A.S.
1. Who We Are
LunAvalos Digital House is a digital marketing agency based in Saltillo, Coahuila, Mexico. We provide social media management services to businesses, handling content creation, scheduling, and publishing on behalf of our clients.
2. Data We Collect
In the course of providing our social media management services, we collect and process the following data from our clients:
Contact Information
Name, email address, and phone number.
Access Credentials
Access tokens for the social media and messaging platforms our clients authorize us to manage: Facebook Pages, Instagram Business accounts, LinkedIn profiles and company pages, TikTok accounts, YouTube channels, and the WhatsApp Business API (encrypted at rest).
These tokens grant us only the permissions required to deliver the contracted service: to list the pages, accounts and channels a client administers, and to publish and schedule content on them. We do not use them to read private messages on social networks, to manage advertising, or to access data belonging to any account other than the ones the client explicitly connects.
Profiles & Pages
Social media profile, WhatsApp Business Account (WABA) IDs, phone number IDs, and page information associated with managed accounts.
Activity History
Content creation metadata, publishing history, and client message exchange history processed through authorized channels.
End-Customer Data (Processed on Behalf of Clients)
When a client uses our WhatsApp support service, we receive and store the phone number, WhatsApp profile name, and message content of the people who contact that client. We process this data solely as a service provider, acting on the client's instructions and for the sole purpose of delivering the support service. The client remains the data controller for this information. We do not use it for advertising, we do not sell it, and we never share it between clients.
3. How We Use Your Data
We use collected data exclusively to:
Publish and schedule content on social media platforms on behalf of our clients
Manage connected social media and WhatsApp messaging accounts as authorized
Fulfill message exchange and communication with end-users via WhatsApp Business API
Draft replies to WhatsApp messages through an automated assistant, when the client has enabled it for their own conversations. The assistant identifies itself as automated in its first message of every conversation, and a human agent can take over at any point.
Generate publishing reports for our clients
Fulfill our contractual obligations
4. Third-Party Platforms
To deliver our services, we interact with the following platforms through their official APIs:
We only access these platforms with the explicit authorization of our clients and solely for the purpose of content management.
Limited Use of Platform Data
Data obtained through these platform APIs is used only to deliver the contracted service to the client who authorized the connection. We do not sell it, we do not use it for advertising or audience building, we do not use it to train machine learning models, and we never combine or share the data of one client with that of another. Each client's connected accounts are isolated from every other client's.
Service Providers
In addition to the platforms above, we rely on the following providers to operate the service. They process data on our instructions and only for the purposes described here:
Anthropic PBC — United States
Provides the language model that drafts replies in our WhatsApp inbox. When a client has enabled the automated assistant, the recent messages of that conversation are sent to Anthropic's API solely to generate the suggested reply. Anthropic does not use this data to train its models, and the data is not retained for any other purpose.
Hostinger International Ltd. — Cyprus, with servers in the United States
Provides the servers and database where our application, including conversation records and encrypted access tokens, is hosted.
We do not authorize any provider to use this data for its own purposes, and we do not share it with anyone else.
International Data Transfers
LunAvalos Digital House, S.A.S. is established in Mexico, and the providers listed above process data outside Mexican territory, principally in the United States. By contracting our services, or by contacting one of our clients through a channel we manage on their behalf, you acknowledge this transfer, which takes place solely to deliver the service described in this policy and under the confidentiality obligations set out in our agreements with each provider.
5. YouTube API Services
Our YouTube publishing feature uses the YouTube API Services. By connecting a YouTube channel to our platform, you agree to be bound by the YouTube Terms of Service, available at https://www.youtube.com/t/terms.
Google's Privacy Policy, which governs Google's handling of the data accessed through these APIs, is available at https://policies.google.com/privacy.
We access your YouTube channel solely to upload and publish the video content you approve. We do not read, download, or store any other data from your channel, and we do not share YouTube data with third parties.
You can revoke our application's access to your Google account at any time from https://myaccount.google.com/permissions. Upon revocation, we delete the stored credentials for that channel; see our Data Deletion page for the full procedure.
6. Data Retention
We retain data for the duration of the contractual relationship and for up to 90 days after termination, unless otherwise required by law.
WhatsApp conversation records, including message content and end-customer contact details, are retained for the duration of the contractual relationship and deleted within 90 days of its termination. A client may request earlier deletion of their conversation records at any time.
7. Your Rights
You have the right to access, rectify, cancel, or object to the processing of your personal data.
To exercise any of these rights, please email us at: contacto@lunavalos.com.
End-Customers of Our Clients
If you contacted one of our clients through WhatsApp and want to access or delete your data, please direct your request to that business, which is the controller of the conversation. If you contact us directly at contacto@lunavalos.com we will forward your request to them and act on their instructions.
Revoking platform access directly
You can revoke our application's access from each platform's own settings at any time:
- Meta (Facebook, Instagram, WhatsApp) — facebook.com/settings?tab=applications
- LinkedIn — linkedin.com/psettings/permitted-services
- TikTok — Settings and privacy > Security and permissions > Manage app permissions
- Google (YouTube) — myaccount.google.com/permissions
Do you want to revoke access immediately?
You can manage the automated deletion of social media data and disconnect your accounts on our dedicated portal.
8. Changes to This Policy
We may update this policy at any time. Changes will be posted on this page with an updated date.
9. Contact Information
For any questions regarding this Privacy Policy, please contact us: